Security update for openexr (important)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:2793-1 Rating: important References: 1188457 1188458 1188459 1188460 1188461 1188462 Cross-References: CVE-2021-20298 CVE-2021-20299 CVE-2021-20300 CVE-2021-20302 CVE-2021-20303 CVE-2021-20304 CVE-2021-3476 CV...

SUSE: Security Advisory (SUSE-SU-2021:2793-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-9180

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description A flaw in OpenEXR's hufDecode functionality allows an attacker to trigger an undefined right shift error by passing a crafted file to be processed by OpenEXR. The highest threat from this iss...

Industrial Light and Magic OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19852)

OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM, Inc. A buffer overflow vulnerability exists in Industrial Light and Magic OpenEXR, which stems from the product's Imf25:: copyIntoFrameBuffer contains a heap buffer overflow, which can be...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An attacker who can submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read, leading to an application crash...

Debian: Security Advisory (DLA-2732-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ILM OpenEXR 输入验证错误漏洞

ILM OpenEXR is an image file format from Industrial Light and Magic ILM for high dynamic range HDR images. ILM OpenEXR suffers from an input validation error vulnerability that originates from an integer overflow in the product's Imf25::hufUncompress, which can be exploited by an attacker to caus...

ILM OpenEXR 代码问题漏洞

ILM OpenEXR is an image file format for High Dynamic Range HDR images from Industrial Light and Magic ILM. ILM OpenEXR suffers from a code issue vulnerability that stems from a flaw in the product's Imf25::Header::operator. The vulnerability can be exploited to execute malicious code. The followi...

ILM OpenEXR 输入验证错误漏洞

OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM, Inc. A buffer overflow vulnerability exists in Industrial Light and Magic OpenEXR, which stems from the product's Imf25:: copyIntoFrameBuffer contains a heap buffer overflow, which can be...

ILM OpenEXR 安全漏洞

ILM OpenEXR is an image file format from Industrial Light and Magic ILM, USA, for high dynamic range HDR images. A security vulnerability exists in ILM OpenEXR. An attacker could exploit this vulnerability to cause a denial of service DoS or code execution...

Industrial Light And Magic OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19853)

OpenEXR is an image file format developed by Industrial Light and Magic LIM for high dynamic range HDR images. Industrial Light And Magic OpenEXR suffers from a buffer overflow vulnerability that stems from OpenEXR incorrectly handling certain formatted An attacker could exploit this vulnerabilit...

Debian DLA-2732-1 : openexr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2732 advisory. Several vulnerabilities were discovered in OpenEXR, a library and tools for the OpenEXR high dynamic-range HDR image format. An attacker could cause a denial of...

[SECURITY] [DLA 2732-1] openexr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2732-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 04, 2021 https://wiki.debian.org/LTS -...

DLA-2732-1 openexr - security update

Bulletin has no description...

Denial Of Service (DoS)

openexr:edge is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow was found in OpenEXR . An attacker could use this flaw to crash an application compiled with OpenEXR...

tinyexr Denial of Service Vulnerability (CNVD-2021-94957)

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::SaveEXR component. An attacker could exploit this vulnerability to cause a denial of...

tinyexr denial of service vulnerability

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

tinyexr 输入验证错误漏洞

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

The vulnerability of the hufDecode function in the OpenEXR library, which involves reading beyond the allowable buffer data limits, allows attackers to access confidential information or cause service failures.

The vulnerability of the hufDecode function in the OpenEXR library lies in reading data beyond the acceptable buffer limits during the execution of exrmaketiled;. Exploiting this vulnerability can allow a remote attacker to access confidential information or cause service failures...

The vulnerability of the hufDecode function in the OpenEXR library, which involves reading beyond the allowable buffer data limits, allows attackers to cause service interruptions.

The vulnerability of the hufDecode function in the OpenEXR library lies in the reading of data beyond the permissible buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...